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REMARKS 



Claims 1 to 6, 8 and 10 were pending in the application at 
the time of the advisory action. Claims 1 to 6, 8 and 10 
remain rejected as anticipated. 

Claims 1 to 6, 8 and 10 are amended to more clearly recite 
the invention. The amendments are supported at least by Fig. 7 
of the application. 

Claims 1 to 10 remain rejected under 35 U.S.C. § 102(e) as 
being anticipated by U.S. Patent No. 6,453,353, hereinafter 
referred to as Win. 

Applicants continue to respectfully traverse the 
anticipation rejection of Claim 1. Applicants respectfully 
note that specific elements in Win corresponding to the claim 
elements have yet to be identified. Moreover in the first and 
final office actions, the Examiner stated, in part: 

using said enrollment results to obtain a service 
from a service provider, said service provider capable of 
communicating with said authority to verify said 
enrollment results (abstract, figures 1, 3B-3C, col. 6, 
lines 58-65, col. 7, lines 15-col. 8, lines 4) ; 



and in the final rejection: 



Win does teach the feature of using said enrollment 
results to obtain a service from a service provider, said 
service provider capable of communicating with said 
authority to verify said enrollment as shown in the 
abstract, figures 1, 3B-3C, col. 6, lines 58-65, col. 7, 
lines 15-col. 8, lines 4; 



and finally in the advisory action: 
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. . . the examiner submits that Win does teach the service 
provider capable of communicating with said authority to 
verify said enrollment as shown in the col. 6, lines 4 0- 
65, col. 7, line 15-col. 9, line 40, col. 10, line 64-col. 
11, line 64 and col. 81, lines 1-34 [the web server and web 
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application server communicates to authorize user's right 
and privileges to access resources] . 

Applicants note that the advisory action effectively 
changed the rejection and cited to material that was not 
previously cited and dropped material that was previously 
cited. If the Examiner continues the rejection in view of Win, 
the Examiner is respectfully requested to cite with specificity 
including reference numerals and names- -and not string cites-- 
the elements in Win that are considered to teach exactly, the 
service provider, the authority, and the enrollment results. 

Using Claim 1, at Col. 81, lines 1 to 34 of Win, as a 
summary of the rejection, the Web server is assumed to be the 
service provider, and the Web application server to be the 
authority. The functions performed by the Web application 
server, as given in the cited section of Win include: 

said Web application server receiving said 

information describing said user; 

in response to receiving said information describing 
said user: 

said Web application server identifying a subset of 
the one or more resources that the user is authorized to 
access, based on stored information describing one or more 
roles and one or more access rights of the user that are 
stored in association with user identifying information, 
and 

said Web application server communicating information 
defining the subset to the Web server; 

First, there is no teaching of enrolling in this section 
of Win. According to this text, the Web application server 
already knew the user because the access is "based on stored 
information describing one or more roles and one or more access 
rights of the user that are stored in association with user 
identifying information." The results are not user data, but 
rather "a subset of the one or more resources that the user is 
authorized." Accordingly, the information returned is not 
enrollment results as recited in Claim 1. Therefore, the Web 
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application server fails to teach the "authority" to the same 
level of detail as recited in Claim 1. 

Further, this part of Win fails to teach that the Web 
server communicates with the Web application server to 
dynamically authenticate the results. In fact, Win taught: 

after communicating information defining the subset, 
said Web server receiving one or more requests from said 
client to access said one or more resources; and 

said Web server resolving whether to grant said one 
or more requests based on said information defining the 
subset . 

Accordingly, the Web server makes the decision to grant 
the access when a request is received. There is no teaching 
that the Web server goes back to the application server to 
authenticate the user upon receiving the request. The MPEP is 
unequivocal about what is required to establish an anticipation 
rejection, and it specifically rejects mixing and matching 
pieces of a reference to arrive at Applicants' claim language. 

Applicants incorporate herein by reference, the comments 
in the prior responses concerning the other cited sections of 
Win. The rejections have not established why these comments 
are incorrect and the above remarks concerning Col. 81 of Win 
simply confirm what was previously pointed out. Applicants 
request reconsideration and withdrawal of the anticipation 
rejection of Claim 1. 

Claims 2, 3, 4, 5, and 8 include a limitation equivalent 
to that quoted above from Claim 1. Thus, the comments with 
respect to Claim 1 are applicable to each of Claims 2 to 5 and 
8, and are incorporated herein by reference. Applicants 
request reconsideration and withdrawal of the anticipation 
rejection of each of Claims 2 to 5 and 8. 

In the anticipation rejection of Claim 6, the final 
rejection stated in part: 
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means for receiving a user-controlled secure storage 
device (Figs. 5A-C, col. 9, lines 51-col. 10, lines 26); 

and 

. . . Win does teach the feature of storing said user 

data in said user-controlled secure storage device 
(figures 5A-C, col, 10 lines 14-55. [Sic] 

The advisory action stated: 

. . . Win does teach the feature of receiving a user- 
controlled secure storage device as shown in figure 5, 
col. 10, lines 14-55. 

Again, Applicants note that the advisory action 
effectively changed the rejection and cited to material that 
was not previously cited and dropped material that was 
previously cited. If the Examiner continues the rejection in 
view of Win, the Examiner is respectfully requested to cite 
with specificity including reference numerals and names- -and 
not string cites- -the elements in Win that are considered to 
teach exactly the user-controlled secure storage device. 

There is no a device shown in Figs 5A to 5C of Win. Figs. 
5A to 5C are steps in a user verification process, a login 
process, and in generating user profile information, 
respectively. The rejections have yet to cite a device, let 
alone a device that is secure and that is user-controlled. In 
addition, the rejection has failed to identify a service 
provider that can dynamically authenticate a user upon 
receiving authenticated user data. Applicants request 
reconsideration and withdrawal of the anticipation rejection of 
Claim 6 . 

Applicants respectfully traverse the anticipation 
rejection of Claim 10. The advisory action and the prior 
rejections have failed to identify what are considered the two 
sets of data as recited in Claim 10. If the Examiner continues 
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the rejection in view of Win, the Examiner is respectfully 
requested to cite with specificity including reference numerals 
and names- -and not string cites- -the elements in Win that are 
considered to teach exactly the two sets of data as recited in 
Claim 10, and element that is considered the service provider. 
Win at most teaches receipt of a request that contains a user 
cookie and not the two sets of data as recited in Claim 10. 
Accordingly, Win fails to teach a service request and two sets 
of user data. Applicants request reconsideration and 
withdrawal of the anticipation rejection of Claim 10. 

Claims 1 to 6, 8 and 10 remain in the application. 
Claims 1 to 6, 8 and 10 are amended. Claims 7 and 9 were 
cancelled previously. For the foregoing reasons. Applicant (s) 
respectfully request allowance of all pending claims. If the 
Examiner has any questions relating to the above, the Examiner 
is respectfully requested to telephone the undersigned Attorney 
for Applicant (s) . 

CERTIFICATE OF MAILING 
I hereby certify that this correspondence is Re spe ctfully submitted, 

being deposited with the United States Postal 
Service with sufficient postage as first class 
mail in an envelope addressed to: Commissioner 
for Patents, P.O. Box 14 50, Alexandria, VA 
22313-1450, on February 6, 2006. 
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